Lucene search

MitreCVE-2008-2449

HistoryMay 27, 2008 - 2:32 p.m.

CVE-2008-2449

2008-05-2714:32:00

CWE-79

mitre

web.nvd.nist.gov

cve-2008-2449

cross-site scripting

xss

vulnerability

phpinstantgallery

remote attackers

web script

html

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

59.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) gallery parameter to (a) index.php and (b) image.php, and the (2) imgnum parameter to image.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

ikemcgphpinstantgalleryMatch2.0

VendorProductVersionCPE
ikemcgphpinstantgallery2.0cpe:2.3:a:ikemcg:phpinstantgallery:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ikemcg	phpinstantgallery	2.0	cpe:2.3:a:ikemcg:phpinstantgallery:2.0:::::::*

References

secunia.com/advisories/30524

www.securityfocus.com/bid/29152

exchange.xforce.ibmcloud.com/vulnerabilities/42374

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

59.3%

JSON

Related for CVE-2008-2449